TDX compatibility

[nickz-t3]

Is your feature request related to a problem? Please describe.
Intel is shifting away from [SGX]for confidential computing. While SGX is deprecated on consumer-grade 11th/12th Gen Core processors, it remains available in some data center contexts, but TDX is positioned as the future, offering easier deployment, better performance for large workloads, and VM-level isolation rather than specific application enclaves

Describe the solution you'd like
CCF should be available to launch on TDX but docs don't talk about that. If TEE is well abstracted that feature should be possible to add.

[achamayou]

Hi @nickz-t3, we welcome contributions towards running on TDX, please check https://ccf.dev/main/contribute/ if you are interested in going that route.

At the moment, the team does not have the bandwidth and access to a Confidential Container platform on TDX that meets CCF requirements (ability to set runtime claims, full code capture in attestation) in the same way we do for SEV-SNP.

If TEE is well abstracted that feature should be possible to add.

There have been several TEE abstraction efforts over the years, such as Open Enclave, Asylo etc. There is tension between precision/security and portability, and I do not think this is a solved problem. Having said that, TDX is VM-based like SEV-SNP, so the main work would be attestation support.